The vulnerability arises in the RDMA/siw subsystem of the Linux kernel where the QP creation routine siw_create_qp incorrectly registers a QP before its internal components are fully initialized. This premature publication allows concurrent QPN lookup operations to reference a QP that is still being set up, potentially exposing uninitialized fields to the kernel or user space. If an attacker can trigger such reads, it could lead to inconsistent state, memory corruption, or a crash, effectively enabling a denial‑of‑service condition or, in the worst case, execution of malicious code if the uninitialized data is exploitable.

All devices running any version of the Linux kernel that includes the legacy RDMA/siw stack are affected. No specific product or version list is provided, so any distribution that still ships the default RDMA/siw implementation before the fix will be susceptible. The fix moves the siw_qp_add call to after the QP struct has been fully populated and linked into the device list.

The CVSS score is not disclosed in the data, and EPSS is not available, so the likelihood of exploitation is uncertain. The CVE is not currently listed in CISA KEV, suggesting no known active exploits. The most likely attack vector involves sending malformed or specially crafted RDMA messages that trigger the race. Because the vulnerability can lead to a kernel crash, it poses moderate to high risk to availability but does not explicitly allow privilege escalation or confidentiality compromise.